Quick Paypal Payments

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Quick Paypal Payments

Information

Software Type Plugin
Software Slug quick-paypal-payments (view on wordpress.org)
Software Status Active
Software Author fullworks
Software Website fullworksplugins.com
Software Downloads 203,120
Software Active Installs 2,000
Software Record Last Updated September 24, 2023

8 vulnerabilities

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
6.1
CVE-2023-33999
Jul 18, 2023
Researcher: Rafie Muhammad
Quick Paypal Payments <= 5.7.26.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-1554
Mar 27, 2023
Researcher: Pablo Sanchez
Quick Paypal Payments <= 5.7.25 - Authenticated (Contributor+) Cross Site Scripting
6.4
CVE-2023-23889
Feb 15, 2023
Researcher: yuyudhn
Quick Paypal Payments <= 5.7.25 - Missing Authorization
7.3
CVE-2023-25714
Feb 14, 2023
Researcher: yuyudhn
Quick Paypal Payments <= 5.7.25 - Unauthenticated Stored Cross Site Scripting
7.2
CVE-2023-25713
Feb 14, 2023
Researcher: yuyudhn
Quick Paypal Payments <= 5.7.25 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2023-25702
Feb 10, 2023
Researcher: yuyudhn
Freemius SDK <= 2.4.2 - Missing Authorization Checks
6.3
CVE ID Unknown
Mar 4, 2022
Researchers:
Quick Paypal Payments < 3.1 - Cross-Site Scripting
6.1
CVE ID Unknown
Oct 18, 2013
Researcher: Zy0d0x
Title CVE ID CVSS Researchers Date
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get CVE-2023-33999 6.1 Rafie Muhammad July 18, 2023
Quick Paypal Payments <= 5.7.26.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-1554 4.4 Pablo Sanchez March 27, 2023
Quick Paypal Payments <= 5.7.25 - Authenticated (Contributor+) Cross Site Scripting CVE-2023-23889 6.4 yuyudhn February 15, 2023
Quick Paypal Payments <= 5.7.25 - Missing Authorization CVE-2023-25714 7.3 yuyudhn February 14, 2023
Quick Paypal Payments <= 5.7.25 - Unauthenticated Stored Cross Site Scripting CVE-2023-25713 7.2 yuyudhn February 14, 2023
Quick Paypal Payments <= 5.7.25 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25702 5.5 yuyudhn February 10, 2023
Freemius SDK <= 2.4.2 - Missing Authorization Checks 6.3 March 4, 2022
Quick Paypal Payments < 3.1 - Cross-Site Scripting 6.1 Zy0d0x October 18, 2013

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation